A privacy consultant is advising a client on how to align their data handling practices with Microsoft's privacy principles. The client wants to implement a comprehensive privacy program. Which combination of principles should the consultant recommend as the foundation?

User control, transparency, and compliance offerings

Data minimization, user control, and transparency

Data minimization, security safeguards, and audit reports

Security safeguards, audit reports, and compliance offerings

How does Microsoft ensure transparency in its data collection and usage?

By publishing the source code of all Microsoft products.

By providing clear and accessible privacy policies and documentation about data practices.

By providing real-time alerts when data is accessed by Microsoft employees.

By allowing users to access all data stored in Microsoft's data centers.

A compliance officer at a financial services firm needs to provide evidence to an auditor that Microsoft 365 meets ISO 27001 requirements. The officer must download the latest ISO 27001 audit report and also review the scope of the certification. What should the officer do on the Service Trust Portal?

Go to the Audit Reports section, select ISO 27001, and download the latest report and the certification scope document.

Navigate to the Privacy section and download the ISO 27001 privacy impact assessment.

Open the Compliance Manager and create an assessment for ISO 27001.

Use the Service Trust Portal's search bar to find the ISO 27001 compliance score for the tenant.

A new IT auditor at a company that uses Microsoft 365 is asked to find documentation about Microsoft's compliance with global standards. The auditor has never used the Service Trust Portal. What is the first step the auditor should take to access the portal's resources?

Sign in with a Microsoft account or organizational account and accept the non-disclosure agreement

Use a personal email address to create a new account

Email Microsoft to request a guest link

Download the portal's mobile app from the app store

What is an example of Microsoft's transparency in data handling?

Encrypting all data at rest and in transit.

Using artificial intelligence to detect security threats.

Providing a tool for users to export their data.

Publishing a transparency report that discloses government requests for user data.

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 4Objective 1

Describe Microsoft Service Trust Portal and Privacy Principles SC-900 Practice Questions (Page 6)

Part of the Describe the capabilities of Microsoft compliance solutions domain, which accounts for 20–25% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~4–8 in this domain), expect 1–2 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

9concepts

20–25%of the exam

Questions 26–30

26expert · medium
A privacy consultant is advising a client on how to align their data handling practices with Microsoft's privacy principles. The client wants to implement a comprehensive privacy program. Which combination of principles should the consultant recommend as the foundation?
Select an answer first
27foundation · easy
How does Microsoft ensure transparency in its data collection and usage?
Select an answer first
28application · medium
A compliance officer at a financial services firm needs to provide evidence to an auditor that Microsoft 365 meets ISO 27001 requirements. The officer must download the latest ISO 27001 audit report and also review the scope of the certification. What should the officer do on the Service Trust Portal?
Select an answer first
29application · easy
A new IT auditor at a company that uses Microsoft 365 is asked to find documentation about Microsoft's compliance with global standards. The auditor has never used the Service Trust Portal. What is the first step the auditor should take to access the portal's resources?
Select an answer first
30foundation · easy
What is an example of Microsoft's transparency in data handling?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.